Where to start?
Start with an audit: it shows where you stand and which risks to address first. If your need is already specific, such as a customer questionnaire, Law 25, training or a scan, go directly to the service concerned. If in doubt, the 15-minute introductory call helps you choose.
The audit gives management a first reading of its risks and the priorities to address. The maturity assessment examines your practices and their evidence in more depth, with a rating based on the NIST CSF 2.0. The scan technically checks your systems to find known weaknesses.
To find out, you need to check who decides, who acts and how your operations resume. The incident response plan defines the roles, the business continuity and disaster recovery plan prepares the restart, and the crisis tabletop exercise puts your team in a realistic situation.
We help you answer your customer’s security questionnaire or prepare your cyber insurance submission, matching your statements with the available evidence. You approve the answers before they are sent.
Yes. We work with management and your IT provider or IT lead, internal or external. The division of tasks is set in the engagement, and scans are performed only with written authorization within the agreed scope.
Confidentiality terms, access and the recipients of deliverables are agreed before any information is collected. Access remains limited to what is authorized, and no scan is performed without your written authorization.